fabro/lib/components
Scott Werner 9e4af50863 Move stage credentials to Petri's spawn env and let the managed token win
Pin Petri at e46845b, the merge of its executor layer change. The stage
credential layer is now a Petri `SpawnEnv` applied with
`EnvHandle::with_spawn_env`, so Petri forwards every other environment
method and applies the layer to one-shot containers as well as processes.

A container gets the managed GITHUB_TOKEN, but no credential store refresh
or Git helper configuration: the store lives in the scope's sandbox, which
the container does not share.

The managed GITHUB_TOKEN now replaces one set in the workflow environment,
an ACP agent's environment or the sandbox's own, as Fabro's stage
environment did before Petri. The token carries exactly the access the run
declares; a stage that needs other access changes its declaration.

The new pin also keeps a timeout as the failure a partial success came
from: `PartialSuccess.underlying` is now an `UnderlyingFailure`, so the
projection reports "the step timed out" for a partial success converted
from a timeout. The run format moves from 7 to 8, which the attach JSON
snapshot records; runs stored before this pin are refused, as with earlier
format changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 19:26:08 -04:00
..
fabro-automation Open sandbox provider identity to plugin kinds 2026-09-09 15:17:32 -06:00
fabro-checkpoint Merge remote-tracking branch 'origin/main' into remove/run-metadata-branches 2026-09-12 16:28:01 -06:00
fabro-dot Read workflow graphs through Petri's DOT parser 2026-09-19 12:23:57 -04:00
fabro-dump Build the run's display graph from Petri's admission 2026-09-19 11:41:58 -04:00
fabro-environment Open sandbox provider identity to plugin kinds 2026-09-09 15:17:32 -06:00
fabro-github Resolve one Git identity per run and inject it everywhere 2026-09-12 11:35:46 -06:00
fabro-graphviz Read workflow graphs through Petri's DOT parser 2026-09-19 12:23:57 -04:00
fabro-install Drop the dependency edges with no production use 2026-09-19 09:33:31 -04:00
fabro-interview Delete the interviewers the Petri cutover left unused 2026-09-19 09:05:52 -04:00
fabro-llm Drop the dependency edges with no production use 2026-09-19 09:33:31 -04:00
fabro-manifest Read workflow graphs through Petri's DOT parser 2026-09-19 12:23:57 -04:00
fabro-mcp-store refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00
fabro-petri Move stage credentials to Petri's spawn env and let the managed token win 2026-10-05 19:26:08 -04:00
fabro-slack Delete fabro-core and the engine half of fabro-workflow 2026-09-18 10:44:41 -04:00
fabro-store Harden artifact capture writes 2026-09-28 14:30:36 -04:00
fabro-tool Answer steer and interrupt with the worker's acknowledgement 2026-09-18 23:54:11 -04:00
fabro-tracker refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00
fabro-variable refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00
fabro-workflow Retry a finished run from the start 2026-10-01 11:14:45 -04:00
fabro-workflow-version Read workflow graphs through Petri's DOT parser 2026-09-19 12:23:57 -04:00